CERTA-2004-AVI-151
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité présente dans ProFTPD permet à un utilisateur mal intentionné de contourner la politique de sécurité.
Description
ProFTPD est un serveur FTP (File Transfert Protocol). Une vulnérabilité présente dans la gestion des restrictions d'accès au serveur FTP permet à un individu mal intentionné d'accèder à des ressources lui étant interdites.
Solution
Appliquer le correctif corrigeant cette vulnérabilité (cf. Documentation).
ProFTPD version 1.2.9.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eProFTPD version 1.2.9.\u003c/p\u003e",
"content": "## Description\n\nProFTPD est un serveur FTP (File Transfert Protocol). Une vuln\u00e9rabilit\u00e9\npr\u00e9sente dans la gestion des restrictions d\u0027acc\u00e8s au serveur FTP permet\n\u00e0 un individu mal intentionn\u00e9 d\u0027acc\u00e8der \u00e0 des ressources lui \u00e9tant\ninterdites.\n\n## Solution\n\nAppliquer le correctif corrigeant cette vuln\u00e9rabilit\u00e9 (cf.\nDocumentation).\n",
"cves": [],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 GLSA 200405-09 de Gentoo :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200405-09.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 MDKSA-2004:041 de Mandrake :",
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:041"
},
{
"title": "Avis de s\u00e9curit\u00e9 FreeBSD du 02 mai 2004 :",
"url": "http://www.vuxml.org/freebsd/"
}
],
"reference": "CERTA-2004-AVI-151",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2004-05-03T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 FreeBSD et de la r\u00e9f\u00e9rence CVE.",
"revision_date": "2004-05-12T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo.",
"revision_date": "2004-05-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans ProFTPD permet \u00e0 un utilisateur mal\nintentionn\u00e9 de contourner la politique de s\u00e9curit\u00e9.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans ProFTPD",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis de s\u00e9curit\u00e9 Mandrake MDKSA-2004:041",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…